Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D49BD8640411F1A6E1E01ACF1D38B0.roa
File: A6D49BD8640411F1A6E1E01ACF1D38B0.roa (raw, json)
Hash identifier: 4jIBYhwlqIAj1eXlL013sRk6gxadXNzWbeoRFQznlek=
Subject key identifier: AB:15:9F:D4:A7:2E:40:71:B2:92:01:E1:AB:BA:72:C3:78:BB:D8:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D24B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D49BD8640411F1A6E1E01ACF1D38B0.roa
Signing time: Tue 09 Jun 2026 13:10:57 +0000
ROA not before: Tue 09 Jun 2026 13:10:52 +0000
ROA not after: Fri 10 Jul 2026 13:10:52 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119371 (0x1d24b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 9 13:10:52 2026 GMT
Not After : Jul 10 13:10:52 2026 GMT
Subject: CN=6a2810e1-bba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:53:5b:14:b7:9f:08:0c:a3:00:9f:b3:50:
a4:31:fe:9a:e0:53:6f:d8:71:6f:7d:e0:4b:8a:e0:
0f:fd:33:05:0b:b4:7d:9f:1f:c4:12:1c:9c:4d:a4:
98:bb:eb:a8:10:57:c9:8a:62:5a:a0:b2:37:cb:3c:
0d:17:95:28:41:00:d9:90:43:78:e5:ef:62:96:78:
92:01:cc:cb:75:c3:80:ab:de:b9:97:c9:8f:19:57:
8a:2f:49:5b:5c:e1:ca:16:e0:77:49:47:35:52:fe:
9f:dc:87:31:b0:2b:14:b2:69:f1:0e:c7:84:d5:56:
60:c1:20:16:19:ee:44:37:52:51:d6:94:0c:1c:04:
c9:e7:e7:60:33:ad:b6:4d:40:eb:7d:60:13:b7:5a:
ba:b7:8f:60:ee:95:a5:70:b0:a2:da:05:6c:56:18:
a8:f7:44:32:be:88:dd:87:3b:92:13:f7:b6:7c:30:
39:a0:50:54:6c:dc:eb:8e:de:d7:f3:ec:65:03:69:
a8:e3:ee:a1:d6:fd:cf:7b:ef:b2:14:02:df:6e:4a:
8a:80:24:b8:53:91:f1:ff:ed:31:22:8f:0d:97:3f:
ee:2d:81:fc:81:cc:4e:e3:aa:ec:94:09:ac:b7:87:
00:f9:d1:cd:fb:46:7f:cc:2b:f0:68:50:ea:e7:12:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:9F:D4:A7:2E:40:71:B2:92:01:E1:AB:BA:72:C3:78:BB:D8:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D49BD8640411F1A6E1E01ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
83:04:d9:c4:69:51:6d:9f:68:88:4c:ca:08:ac:1a:00:ab:4b:
fb:2f:b9:1b:6d:12:88:ef:c7:5a:43:2f:bc:85:a8:77:44:7b:
66:a6:11:2b:4a:d8:08:b4:ad:3f:ee:bd:b4:4f:ab:7f:d1:d0:
ba:13:e1:b7:55:8b:51:20:f4:9c:9d:ed:16:d3:95:8a:fe:4f:
e4:97:e3:90:1b:39:9c:c5:a3:05:dd:09:7e:a3:a9:d4:8d:bf:
08:a2:5e:9b:dc:0d:3d:74:70:17:9f:7e:e7:34:c0:61:64:30:
ab:d2:25:25:93:7e:36:c5:27:08:1a:dd:1b:e8:58:70:d6:8c:
37:98:db:40:cf:e1:d2:13:ad:e3:79:e8:df:85:65:12:f3:fa:
79:c9:4e:0c:52:d7:ec:3b:8a:04:fa:36:2a:bb:5d:04:7a:4c:
b4:55:d5:52:3c:a3:a5:84:da:13:b9:ce:de:33:fd:77:6d:3d:
6c:c4:17:33:37:68:9f:65:c6:38:0e:4d:32:ba:60:16:87:8e:
4b:57:50:17:55:d4:91:5d:fa:d5:1e:13:ae:b5:3a:39:fb:81:
54:cf:17:98:2e:39:f7:8f:31:f3:71:83:19:ff:c2:90:2d:10:
34:a1:c1:bd:cf:aa:89:b1:b1:73:8f:45:b2:89:21:c8:db:36:
57:1c:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:59:52 2026 by rpki-client